Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa
File:                     d4a714f3-d6ab-3784-91ec-aa3610979901.roa (raw, json)
Hash identifier:          ZwhsX10XWCiyr66qMcgeyCH8Jjt2R6b+f1xWi1xRml4=
Subject key identifier:   FA:A7:99:6F:93:D7:99:19:F8:ED:D3:E4:E7:DF:4E:B9:46:28:24:2E
Certificate issuer:       /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial:       010D0C9F43285847362B5018835A89E281997340
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     19905
IP address blocks:        104.250.64.0/19 maxlen: 24
                          147.194.0.0/16 maxlen: 24
                          192.235.128.0/17 maxlen: 24
                          209.163.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:50:18:83:5a:89:e2:81:99:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=e0fb71b4-1ce8-4313-b35a-d0bbf64e610c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b8:a2:f8:b3:f0:2c:8c:d5:33:fc:4c:3b:2e:
                    ea:c0:50:a3:6d:35:d4:13:88:6d:f9:ea:86:a1:5c:
                    0b:8c:94:1d:65:1d:c9:e7:bf:68:46:c6:0c:03:ba:
                    8c:c2:da:9a:bb:0c:de:5b:28:42:1f:66:58:30:80:
                    a4:3f:a6:e1:ef:d0:98:01:11:a7:22:9a:e5:87:63:
                    95:b6:f3:80:66:3b:93:78:85:d2:64:c7:0d:8e:eb:
                    52:eb:dd:e5:0e:79:b6:32:55:96:0e:a8:a7:12:78:
                    83:96:8e:f8:e5:aa:85:66:da:68:93:32:ce:cc:d0:
                    a7:58:7c:ab:2f:c7:96:93:89:37:44:57:74:ec:cf:
                    c6:b7:f7:e0:c9:3e:76:1c:0c:5b:96:85:de:73:8e:
                    b6:e1:13:f8:1d:cc:60:a8:0e:3a:8d:d8:bb:13:1b:
                    e4:68:04:a3:fa:9c:d8:8f:47:5a:3b:72:c6:de:52:
                    d8:f9:63:34:58:52:c2:3e:17:4e:65:cd:b0:46:7c:
                    fb:cd:22:08:2f:0e:9f:45:79:a1:e4:9e:de:9f:81:
                    ff:44:09:66:58:98:3c:b5:08:78:8b:43:a4:89:80:
                    ec:0d:34:ac:db:d0:03:3f:c9:a7:53:52:4a:5b:d6:
                    db:72:9f:dd:34:dc:6c:ac:f6:f8:94:17:24:c4:ab:
                    b3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:99:6F:93:D7:99:19:F8:ED:D3:E4:E7:DF:4E:B9:46:28:24:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl

            X509v3 Authority Key Identifier:
                keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.64.0/19
                  147.194.0.0/16
                  192.235.128.0/17
                  209.163.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7e:b3:61:96:7b:88:6f:5e:29:89:34:d9:a6:25:7c:20:7f:
         0f:80:0d:24:22:65:7d:1e:57:8f:16:34:3f:12:de:f8:a7:2a:
         d7:03:2b:92:ae:6e:75:e2:d6:39:cb:07:47:8e:07:b9:49:ad:
         4a:d2:a7:7f:81:88:31:44:38:ca:0e:b2:c1:7b:92:b9:38:c6:
         7e:5c:98:4f:ff:c0:c8:d6:a7:c4:4e:2c:6c:3f:9d:10:61:5a:
         af:89:3c:90:4b:a4:69:36:2b:9d:8b:6b:87:9c:eb:f4:4c:59:
         e7:06:df:d6:28:ce:87:d6:3e:9a:87:cf:e3:22:87:07:19:19:
         6c:f8:84:f0:99:59:c1:88:82:00:17:eb:e6:90:eb:19:c4:33:
         8a:f6:23:a8:d8:89:c0:41:29:a1:2b:df:4d:0e:a3:37:d0:c0:
         dd:af:82:c3:a8:61:a6:09:dd:bb:dc:aa:e4:47:ab:80:87:04:
         2c:eb:de:c5:af:3f:df:5f:75:c8:b6:99:d4:b3:b9:5c:b7:a6:
         d7:82:e0:ad:88:39:0d:ca:2a:a1:2a:fc:9e:f2:3a:2c:b5:5a:
         e6:3d:42:ac:b5:3e:ae:ec:92:bf:8d:e3:d9:41:87:cc:ed:7e:
         d8:55:23:2a:b9:47:b1:4a:da:d2:3d:50:12:af:9b:89:c0:a4:
         b3:d9:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:29 2024 by rpki-client on console-ams.rpki-client.org